ZDI-26-223 MEDIUM 5.9 Published Mar 23, 2026

Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

Samsung

Samsung Galaxy S25 devices contain a remote information disclosure vulnerability (CVE-2025-58488) that allows attackers to access sensitive data if users are tricked into visiting a malicious webpage or opening a malicious file. While rated as medium severity with a CVSS score of 5.9, the attack requires user interaction, making it less critical than vulnerabilities that execute automatically. Security teams should prioritize patching Samsung Galaxy S25 devices and advise users to avoid clicking suspicious links or opening untrusted files from unknown sources.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy